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Listing of the Claims: 

The following is a complete listing of all the claims in the application, with 
an indication of the status of each: 

1-79. Canceled 

80. (Previously presented) A method for accessing personal information, 
associated with a plurality of users and stored in a computer system, in a manner 
that protects the privacy of users, wherein each user has a personal identifier and a 
plurality of anonymous identifiers, comprising the steps of: 

prompting a user for the user's personal identifier; 

determining a first anonymous identifier from information derived from 
the user's personal identifier; 

accessing data associated with the user stored in a first database using the 
first anonymous identifier; 

authenticating the user using the data associated with the user accessed in 
said first database using the first anonymous identifier; 

determining a second anonymous identifier from information derived from 
the user's personal identifier if the step of authenticating is positive; and 

using the second anonymous identifier to access personal information 
associated with the user stored in a second database. 

81. (Previously presented) The method for accessing personal information recited 
in claim 80, further comprising the steps of: 

providing the user's personal identifier to a first server computer, said first 
server computer performing the step of determining the first anonymous identifier; 

providing the first anonymous identifier to a second server computer, said 
second server computer performing the steps of accessing data from said first 
database and authenticating the user, said second server computer further 
providing a positive indication to the first server computer if the user is 
successfully authenticated; 

wherein said first server computer performs the step of determining the 
second anonymous identifier in response to a positive indication from the second 
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server computer, said first server computer further providing the second 
anonymous identifier to a third server computer, said third server computer 
performing the step of accessing personal information associated with the u 
from said second database. 



